Re: PCAnywhere for the HMC.

One note about the port 2300. Yes, there is no way to change this. However, with one customer, we did find a way around it. They had issues opening port 2300, but did not have issues with using port 23 (standard telnet) to get to the HMC. With their permission, we installed a small off-the-shelf router between their network and the HMC. Many commodity routers have the ability to do "port forwarding." This is a feature to allow online gaming. We simply set up the router to forward requests on port 23 to port 2300.

So they could then telnet to the HMC address using the standard port of 23 and the router would forward those requests to port 2300. As the router was only connected directly to the HMC, it only did this for traffic to the HMC.

Note that I've heard port 2300 described as a "security feature" for HMC access, and perhaps that was IBM's intent. If so, it is pretty weak, as it is very easy to see if you look at the network traffic. So defeating this level of "security" might not be so bad. As always, check with your corporate policies.

If you really want secure access, set up SSL. Note that you'll still need proper credentials to access the HMC, so (as in the shops I've worked in) this extra security might not be worth the effort.



-----Original Message-----

From: John Jones <chianime@xxxxxxxxx>
Sent: Jun 17, 2009 7:27 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: PCAnywhere for the HMC.

As long as you do a shared console session, the session will survive random
and intentional disconnects. I've done this from home: Connect via VPN,
start a session, start an OS upgrade (or RCLSTG or GO SAVE/21), make sure
it's at a point where it'll take a while, then close the 5250 session and
maybe close the VPN connection. Whenever I check on it, I just re-enter the
shared session password and it's as if I never left.

Shared sessions are also good (although not perfect) if you want to watch or
instruct someone else remotely. Both of you can log in and the person
observing can't see what the person leading is typing but they do get the
screen transitions and updates.

On Wed, Jun 17, 2009 at 12:07 AM, Lukas Beeler <
lukas.beeler@xxxxxxxxxxxxxxxx> wrote:

On Tue, Jun 16, 2009 at 22:39, <rob@xxxxxxxxx> wrote:

I really like the remote capability of V7 of HMC. However, is there
something like PC Anywhere or Dameware that will run on it?

I usually run IBM's 5250 emulation off one of our terminal servers.
This way, even if a i lose the VPN connection, the Console session
will stay up on the TS.

However, i suppose that's not an option for you. Another way would be
to install a RSA II Slimline Adapter into the HMC, and then access the
HMC's display using a web browser.

Or plug the HMC into an IP KVM.

--
Read my blog at http://projectdream.org
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
JJ
"I'm in no condition to drive...Wait! I shouldn't listen to myself, I'm
drunk!"
- Homer J. Simpson
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.